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SYSTEM AND METHOD FOR 
SECURE NETWORK PROVISIONING 


ABSTRACT OF THE INVENTION 

5 A system and method have been provided for securely 

provisioning configuration data in a network-connected integrated circuit 
device. The method comprises: receiving configuration data addressed to 
device registers; loading the configuration data in configuration registers; 
and, locking to prevent the loading of subsequently received configuration 
10 data. Locking to prevent the loading of subsequently received 

configuration data includes the substeps of: establishing at least one 
locking register having a first address; loading a first lock set in the 
locking register; and, in response to loading the first lock set in the locking 
register, preventing the loading of received data in the configuration 
15 registers. In some aspects of the method, locking to prevent subsequent 
loading of configuration data includes: establishing a first locking register 
having a first address and a second locking register having a second 
M address; loading a first lock set in the first locking register and a second 

M lock set in the second locking register; and, in response to loading the first 

20 lock set in the first locking register and the second lock set in the second 
locking register, preventing the loading of received data in the 
configuration registers. The first address and second address are often 
non-contiguous for additional security. The loading of the received data in 
configuration registers includes loading a non-lock set, not equal to the 
25 first lock set, in the locking register. Then, in response to loading the non- 
lock set in the locking register, loading received data in the configuration 
registers. 


